
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.mft
File: r_zmN5iBZebFG_v-vRKD1REkAZA.mft (raw, json)
Hash identifier: 5IRh1aUktyd/2ofbMxNtUzAbC0ArbIsObtfp4BKPDNU=
Subject key identifier: E9:1B:3E:6D:0B:E3:9C:16:D1:4A:40:7A:27:33:55:3F:1B:0F:64:B8
Authority key identifier: AF:FC:E6:37:98:81:65:E6:C5:1B:FB:FE:BD:12:83:D5:11:24:01:90
Certificate issuer: /CN=A91E4468/serialNumber=AFFCE637988165E6C51BFBFEBD1283D511240190
Certificate serial: 0221
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_zmN5iBZebFG_v-vRKD1REkAZA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.mft
Manifest number: 01FB
Signing time: Thu 23 Jul 2026 04:37:15 +0000
Manifest this update: Thu 23 Jul 2026 04:37:14 +0000
Manifest next update: Thu 30 Jul 2026 04:37:14 +0000
Files and hashes: 1: r_zmN5iBZebFG_v-vRKD1REkAZA.crl (hash: UH/lGAahIGhaJ3mvIIihOVO921j/zJQN6G8wqxMOm7M=)
2: C608133C226F11EF8D24AD63C4F9AE02.roa (hash: ySADP91L9zzRBTSfDoHJ50+Ik7XzeYcUmFcCyfVbDoY=)
3: C531DD12226F11EF8D24AD63C4F9AE02.roa (hash: 4apUkb/9OAkWGMu7J3h8tdbWlfEZR8ZKAMbBcPjKoaU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.crl
rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_zmN5iBZebFG_v-vRKD1REkAZA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:37:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 545 (0x221)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4468, serialNumber=AFFCE637988165E6C51BFBFEBD1283D511240190
Validity
Not Before: Jul 23 04:37:14 2026 GMT
Not After : Jul 30 04:37:14 2026 GMT
Subject: CN=6a619a7a-e98e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3a:51:bc:1b:50:05:01:30:5e:04:c1:6b:4b:
27:d8:a8:01:10:e4:1e:f8:34:de:5c:f2:6d:a3:ac:
0e:75:7a:ab:d7:af:02:6d:50:dc:cc:95:b9:54:77:
21:ae:65:39:30:eb:8a:d9:cb:68:4b:7b:7b:fd:5f:
08:7c:a0:32:8f:ce:ee:30:02:50:b9:fa:f6:90:6f:
fe:ef:d5:3c:4c:4e:ce:5f:ee:b1:8e:b1:72:d8:b3:
1a:28:a1:ba:60:a0:ef:bf:5b:76:e9:a4:50:90:16:
c0:31:67:d8:bc:9b:1e:3f:c9:bf:e8:df:cb:7f:38:
69:db:bc:4b:58:fa:24:66:46:78:e4:9c:3c:2d:0c:
28:10:1a:ba:ec:9e:df:c8:59:59:ba:73:ee:72:4a:
1e:56:5a:dd:fd:46:37:68:d9:91:2b:07:30:52:1f:
f7:3e:b3:c6:bf:c9:0d:e8:73:81:0f:aa:bd:76:d2:
86:c8:0f:12:e7:e6:5e:f5:2b:1b:b7:64:87:8b:e5:
2e:ac:e0:37:f5:65:3a:64:02:d5:5b:80:cd:d6:10:
e7:14:1f:a0:93:9e:34:52:2e:9d:88:f9:7b:67:bc:
3a:ad:95:76:d7:41:1d:66:e7:a2:97:fc:bc:42:28:
f0:81:98:11:7d:3e:f0:8b:79:11:29:51:df:f6:ba:
7e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:1B:3E:6D:0B:E3:9C:16:D1:4A:40:7A:27:33:55:3F:1B:0F:64:B8
X509v3 Authority Key Identifier:
keyid:AF:FC:E6:37:98:81:65:E6:C5:1B:FB:FE:BD:12:83:D5:11:24:01:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r_zmN5iBZebFG_v-vRKD1REkAZA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4468/827524E88EE511EEA2EEDD12C4F9AE02/r_zmN5iBZebFG_v-vRKD1REkAZA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:53:78:ee:a1:4e:c2:8a:0b:1f:e9:bf:5a:53:52:dd:cb:61:
bc:d3:e5:8b:51:6a:28:aa:53:75:69:7f:b2:f5:64:43:84:01:
d1:aa:2e:11:5f:c7:29:b1:6d:5f:7a:cf:f9:ec:46:5c:8b:22:
b5:3c:9c:3c:2a:e1:02:28:f2:99:d4:53:ba:eb:9b:07:e1:44:
15:a6:8d:05:5b:41:a2:98:e1:7e:43:af:ac:af:cf:64:6c:42:
fc:2e:40:9a:bd:00:c3:91:c8:9e:c0:4f:76:74:17:4e:c1:65:
08:3f:0d:97:a6:e9:53:76:56:1d:d4:18:f9:d2:44:e2:ac:f0:
e7:19:88:43:85:2d:c7:92:61:36:3a:7c:43:0d:13:fe:44:6e:
77:00:b6:31:61:48:c0:1c:3e:b8:d1:8d:33:54:41:49:51:50:
7c:bc:81:54:d4:e8:e7:39:63:dc:38:c9:44:bb:cd:0d:bd:1b:
7f:16:28:c6:6b:4f:ca:bb:2b:84:86:b0:57:a2:a0:2b:22:00:
a9:34:86:ac:b0:a2:8c:69:b7:50:0d:b1:68:2a:ed:2a:80:11:
34:3c:62:bd:9f:48:56:32:bf:cc:14:c8:56:1a:55:a3:fc:0c:
36:b6:d5:37:11:e3:ca:e5:2c:cf:2d:b7:70:61:ae:c1:14:80:
3b:ad:d1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:02:24 2026 by rpki-client